PHP maintainers blame Chainguard for breaking embargo on critical AI-discovered flaws
PHP maintainers have accused supply-chain security firm Chainguard of breaching an embargo on critical vulnerabilities, releasing patches six hours early. The flaws, discovered using AI, affect 70% of the web and allow remote code execution. While Chainguard argues active exploitation justified the move, the incident highlights the fragility of coordinated disclosure in the AI era.